A security issue has been reported in Web Wiz Guestbook, which may allow malicious people to gain knowledge of sensitive information.

The problem is that Web Wiz Guestbook by default stores the database file in "database/WWGguestbook.mdb", which can be accessed by anyone. This may disclose the administrative username and password.

The issue has been reported in version 6.0. However, other versions may also be affected.

Solution
Restrict access to the "database" folder.

Provided and/or discovered by
CyberTalon

Deep Links
Links available to Secunia VIM customers